CVE-2018-8974: Cdc Microbetrace

High severity, CVSS 7.8. EPSS: 4% chance of exploitation in the next 30 days.

Centers for Disease Control and Prevention MicrobeTRACE 0.1.11 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV file with an initial 'Source<script type="text/javascript" src=' line. Fix released on 2018-03-28.

Affected products

• Cdc Microbetrace: version 0.1.11 only

Published 2018-04-26. Last modified 2026-06-17.